Go to file
Aditya Bansal 9b485f3ef4 auth: Fix bug with subdomains and GitHub auth causing apparent logouts.
This adds a new settings, SOCIAL_AUTH_SUBDOMAIN, which specifies which
domain should be used for GitHub auth and other python-social-auth
backends.

If one is running a single-realm Zulip server like chat.zulip.org, one
doesn't need to use this setting, but for multi-realm servers using
social auth, this fixes an annoying bug where the session cookie that
python-social-auth sets early in the auth process on the root domain
ends up masking the session cookie that would have been used to
determine a user is logged in.  The end result was that logging in
with GitHub on one domain on a multi-realm server like zulipchat.com
would appear to log you out from all the others!

We fix this by moving python-social-auth to a separate subdomain.

Fixes: #9847.
2018-07-10 16:49:00 +05:30
.circleci circleci: Add support for Ubuntu Bionic. 2018-06-01 18:02:50 -07:00
.github github: Suggest GIFs too in PR template. 2018-02-16 09:59:22 -08:00
.tx tx config: Update slug for mobile. 2018-06-17 17:32:25 -07:00
analytics models: Add USER_REACTIVATED event type constant to RealmAuditLog. 2018-07-10 15:42:26 +05:30
confirmation confirmation: Removed unused send_email import. 2018-06-16 05:27:04 -07:00
corporate corporate: Remove unused imports (F401). 2017-11-07 16:37:04 -08:00
docs auth: Fix bug with subdomains and GitHub auth causing apparent logouts. 2018-07-10 16:49:00 +05:30
frontend_tests settings UI: Add copy zuliprc button to bot information box. 2018-07-10 15:19:05 +05:30
pgroonga pgroonga: Upgrade to PGroonga 2 API. 2018-05-31 13:00:34 -07:00
puppet nginx: Set X-Frame-Options header to DENY. 2018-05-30 09:24:17 -07:00
requirements pypi_packages: Upgrade to release 0.5.1. 2018-07-01 08:17:17 -07:00
scripts Enable pycodestyle W605 (invalid escape sequence). 2018-07-03 16:54:46 +02:00
static settings UI: Add copy zuliprc button to bot information box. 2018-07-10 15:19:05 +05:30
templates deploying_bots.md: Fix a couple of minor formatting issues. 2018-07-10 10:01:16 +05:30
tools messages: Add support for right-to-left messages. 2018-07-10 10:47:56 +05:30
zerver auth: Fix bug with subdomains and GitHub auth causing apparent logouts. 2018-07-10 16:49:00 +05:30
zilencer models: Add SUBSCRIPTION_CREATED event type constant to RealmAuditLog. 2018-07-10 15:42:26 +05:30
zproject auth: Fix bug with subdomains and GitHub auth causing apparent logouts. 2018-07-10 16:49:00 +05:30
zthumbor mypy: Rewrite sign_is_valid in zthumbor helpers.py for None secret_key. 2018-03-25 08:59:08 -07:00
.codecov.yml Try to avoid codecov spam. 2017-12-29 07:23:26 -05:00
.editorconfig Editing (minor): Add .pyi to .editorconfig. 2017-12-18 07:35:58 -05:00
.eslintignore zulip_ops: Delete the long-disused `stats1.zulip.net` config and its dependencies. 2017-08-15 17:30:31 -07:00
.eslintrc.json widgets: Add todo widget. 2018-07-10 11:18:05 +05:30
.gitattributes gitattributes: Treat .ogg files as binary. 2018-04-27 09:59:19 -07:00
.gitignore mypy: Add basic support for invoking dmypy to run-mypy. 2018-05-21 22:41:08 -07:00
.gitlint lint: Allow revert commit messages in gitlint. 2018-02-13 09:21:01 -08:00
.isort.cfg tornado: Fix logging of tornado activity level. 2018-04-17 15:59:01 -07:00
.npmignore
.travis.yml travis: Disable most suites in favor of CircleCI! 2018-01-31 11:10:03 -08:00
CODE_OF_CONDUCT.md repository: Add CODE_OF_CONDUCT.md. 2017-06-14 18:43:08 -07:00
CONTRIBUTING.md documentation: Migrate all CZO stream links to new stream URL style 2018-05-24 15:15:34 -07:00
Dockerfile-dev Move Dockerfile to Dockerfile-dev. 2017-09-25 12:32:33 -07:00
Dockerfile-postgresql docker: Add PGroonga support to Postgresql Dockerfile. 2018-05-23 11:53:32 -07:00
LICENSE docs: Move license declaration from README.md to LICENSE. 2017-11-14 16:04:23 -08:00
README.md README: Document support for Debian and Bionic. 2018-07-01 01:47:03 -07:00
Vagrantfile Vagrantfile: Fix typo in spelling of problems. 2018-06-01 11:58:09 -07:00
manage.py Remove `from __future__ import absolute_import`. 2017-10-17 22:59:42 -07:00
mypy.ini mypy: test_embedded_bot_system.py: add asserts & remove from mypy.ini. 2018-06-19 10:48:38 -07:00
package.json webpack: Transition app.js to be compiled by webpack. 2018-07-05 11:03:08 +02:00
version.py emails: Add preheader to "new login" emails. 2018-07-05 12:44:54 +02:00
yarn.lock webpack: Transition app.js to be compiled by webpack. 2018-07-05 11:03:08 +02:00

README.md

Zulip overview

Zulip is a powerful, open source group chat application that combines the immediacy of real-time chat with the productivity benefits of threaded conversations. Zulip is used by open source projects, Fortune 500 companies, large standards bodies, and others who need a real-time chat system that allows users to easily process hundreds or thousands of messages a day. With over 300 contributors merging over 500 commits a month, Zulip is also the largest and fastest growing open source group chat project.

CircleCI Build Status Travis Build Status Coverage Status Mypy coverage docs Zulip chat Twitter

Getting started

Click on the appropriate link below. If nothing seems to apply, join us on the Zulip community server and tell us what's up!

You might be interested in:

You may also be interested in reading our blog or following us on twitter. Zulip is distributed under the Apache 2.0 license.